Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: aJr3Gm74HgBZuhVbhMEeQtzBHVgYDFj61h4cRp63Od4=
Subject key identifier: 07:BD:FC:9E:6A:C8:CC:C5:48:41:6C:3A:F2:04:14:89:CC:F9:46:7B
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 019E1BD8C1A2841DBFA078E176D84CC5F5FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 11:00:50 +0000
Manifest this update: Tue 12 May 2026 11:00:50 +0000
Manifest next update: Wed 13 May 2026 11:00:50 +0000
Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: pJkGCSkoqdfpZvrnSS4a4nBE89z+7wW1/DeQdf5lOEg=)
2: WHq-HnXpka6rpneJHgIs142O010.roa (hash: vIU6EqtRsEPuNd3qk5b/5wKThF8xlpJsgvmp83AjeXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:c1:a2:84:1d:bf:a0:78:e1:76:d8:4c:c5:f5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: May 12 11:00:50 2026 GMT
Not After : May 13 11:00:50 2026 GMT
Subject: CN=07bdfc9e6ac8ccc548416c3af2041489ccf9467b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:88:c7:d2:25:b7:1f:55:f2:3b:52:bb:14:
98:4f:8e:07:4f:36:c6:f5:aa:da:3a:94:66:3a:5d:
e8:83:46:cf:49:66:a7:31:2a:cb:e3:3b:8d:72:c7:
b3:ac:29:66:a0:04:16:59:eb:e6:18:de:9f:27:da:
13:e0:b2:0a:8c:bc:94:e0:fe:77:b9:eb:e9:38:4f:
3d:5b:39:57:f1:b4:81:e3:a8:6b:a2:96:0c:c9:6f:
4f:a5:6b:4d:d3:e1:7c:42:33:58:19:8a:ae:94:08:
32:dd:7e:18:a1:d4:c7:98:7a:d1:a9:e2:b1:07:11:
ad:23:6b:86:1f:dc:97:6e:d6:1c:64:90:83:de:20:
4d:77:2d:52:da:d4:3a:6e:b7:08:91:e6:81:f9:49:
05:31:41:bb:a2:bc:b1:9c:67:ad:cd:fc:60:fa:ef:
7b:31:47:77:f5:fd:45:44:bf:59:62:75:8d:72:b2:
22:29:65:d7:dd:ee:84:38:1b:ad:e6:1e:6f:f0:b8:
27:4f:56:c4:f0:f0:07:92:f5:c8:31:41:3c:d7:71:
92:9c:b9:78:a1:ee:b2:e5:71:31:52:48:4f:89:d5:
5d:b0:9a:e2:3e:4f:8c:6b:83:33:e0:7d:8e:14:03:
9c:e1:d5:86:e7:6d:f6:97:0f:54:b6:97:25:f2:6c:
54:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BD:FC:9E:6A:C8:CC:C5:48:41:6C:3A:F2:04:14:89:CC:F9:46:7B
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:71:01:74:ea:68:4c:05:41:32:d4:39:30:1b:f8:84:f0:ce:
87:e4:7b:f7:04:80:db:9c:c1:e3:58:1c:36:26:2c:40:ca:25:
2b:ad:ea:db:d1:2e:50:ad:94:1f:3e:35:1a:27:dd:cf:21:08:
57:71:81:2b:97:f1:25:20:ac:e1:ec:92:c9:89:37:85:e3:73:
e0:6a:83:1c:16:f8:5f:d6:b7:d2:e1:fc:76:f4:69:6c:a9:54:
51:5f:97:12:af:f4:e3:02:f8:67:0d:b6:79:81:a7:93:eb:f0:
c3:aa:6c:8d:37:59:47:53:59:23:2e:6a:3e:78:02:7b:2a:f0:
fd:b8:87:0e:51:48:3e:6d:b0:b4:b4:d7:ab:c1:de:af:e1:27:
c8:da:54:25:5d:3f:9c:3b:eb:7c:ba:db:a8:5d:ed:b2:35:a6:
03:0a:96:d9:83:44:f7:75:63:84:d9:d0:b7:49:23:c6:77:8e:
0a:27:34:72:eb:7c:8b:c8:a9:72:ea:47:7e:c3:5e:aa:ff:da:
2c:96:4c:0b:8c:43:fe:ca:28:98:8b:6f:d0:bb:5d:a7:bc:9f:
6f:94:ca:71:9e:67:b5:22:d4:e6:62:5a:5f:20:97:49:f8:54:
f6:e9:60:2c:a4:4b:4d:28:ac:9d:a5:6a:c3:9b:17:43:07:c6:
b9:27:d3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:47 2026 by rpki-client